Suspicious Actions
Suspicious Actions highlights flagged security events that may require management attention.
How to Access
Navigate to: Sidebar > Logs > Suspicious Actions
Route: /logs/suspicious-actions
Quick actions:
Overview
The Suspicious Actions log automatically flags events that deviate from normal patterns — such as unusually large discounts, frequent voids, cash drawer opens without sales, after-hours activity, or repeated login failures. This helps management identify potential fraud, errors, or policy violations.
Columns
| Column | Description |
|---|---|
| Date | Date and time of the event |
| User | Employee involved |
| Action | Type of suspicious action |
| Details | Context and specifics of the flagged event |
Step-by-Step Guide
- Go to Logs > Suspicious Actions.
- Review the list of flagged events.
- Use filters to narrow by date range, user, or action type.
- Click on an entry to see full details.
- Investigate and take appropriate action if needed.
FAQ
What triggers a suspicious action flag?
The system uses predefined rules to flag events: large discounts, frequent voids, drawer opens without sales, and other anomalies. The specific rules depend on system configuration.
Can I customize which actions are flagged?
Flagging rules are defined at the system level and cannot be edited in the dashboard. Your company administrator or a Paloma365 specialist adjusts them — write here which thresholds you need.
Are suspicious actions the same as system log entries?
No. The system log records all actions. Suspicious actions is a filtered subset that highlights only events that match anomaly detection rules.